An Abnormal Commitment to Security and Privacy

December 17, 2021

Customers place tremendous trust in Abnormal to protect them from the full spectrum of attacks when they provide us access to the email stored in Microsoft 365 or Google Workspace. To that end, we’re focused on protecting your data and building your trust. This post describes our latest product security enhancements and our relentless commitment to protecting customer data.

We diligently follow key privacy and data protection principles for data minimization and processing purpose limitations, and maintain security, integrity, and confidentiality to ensure customer data is appropriately protected in alignment with global privacy frameworks. We also use industry-standard software development lifecycle processes to ensure all production code is fully peer-reviewed and deployed via approved methods.

Refined Portal Session Timeout Security

As part of our December 2021 product security enhancements, we have changed the Abnormal portal session timeout logic to automatically sign out a user after 60 minutes of inactivity, with a maximum user session length of one day. If desired, each customer can request custom timeout intervals that better conform with their own security policies, such as setting the timeout value to 15 minutes. As a result, customers benefit from increased security measures and uninterrupted sessions.

It is recommended wherever possible to use multi-factor authentication (MFA) as one of the most effective deterrents for preventing account takeover attacks. We support Okta for both SSO and MFA.

Comprehensive Role-Based Access Controls (RBAC)

Our newly expanded role-based access controls functionality enables customers to restrict access to specific tenants and administrative functions based on the user’s assigned roles and permissions. The expansive range of roles combined with per-product permissioning ensures more control while maintaining usability and ease of use.

Restricting product access to users by role

Granular product permissions within the Abnormal portal.

The additional enterprise-grade granular permissions, particularly for obscuring message bodies and per tenant permissions, sets the foundation for granular permissioning and will support new product features added in the future.

Setting product access permissions by individual role

Individual role, per tenant, and per product permissions in the Abnormal portal.

This further enhances security, privacy, and compliance, proving extremely valuable for larger enterprise customers with users in different divisions, departments, or teams across diverse geographies.

Abnormal's Commitment to Security and Privacy

The protection of our customer’s data is of paramount importance. To demonstrate the design and effectiveness of our security controls within our environment, an independent third-party audit is conducted annually, and Abnormal maintains a SOC 2 Type 2 report due to this regular audit activity. Upon request, we can share security framework reports and security control responses with external entities under a non-disclosure agreement (NDA).

As of December 21, 2021, Abnormal adheres to the following privacy regulations and compliance certifications:

Compliance

Privacy Regulations

Amazing products and lasting partnerships are built on trust and transparency. Abnormal is committed to providing secure products that protect your data and build your trust.

Not yet an Abnormal customer? Request a demo today to learn how Abnormal can enhance your email security capabilities and provide visibility into email threats that other solutions miss.

Demo 2x 1

See the Abnormal Solution to the Email Security Problem

Protect your organization from the attacks that matter most with Abnormal Integrated Cloud Email Security.

Related Posts

B 06 21 22 Threat Intel blog
Executives are no longer the go-to impersonated party in business email compromise (BEC) attacks. Now, threat actors are opting to impersonate vendors instead.
Read More
B 06 7 22 Disentangling ML Pipelines Blog
Learn how explicitly modeling dependencies in a machine learning pipeline can vastly reduce its complexity and make it behave like a tower of Legos: easy to change, and hard to break.
Read More
B 04 07 22 SEG
As enterprises across the world struggle to stop modern email attacks, it begs the question: how are these attacks evading traditional solutions like SEGs?
Read More
Enhanced Remediation Blog Cover
The most effective way to manage spam and graymail is to leverage a cloud-native, API-based architecture to understand identity, behavior, and content patterns.
Read More
B 05 16 22 VP of Recruiting
We are thrilled to announce the addition of Mary Price, our new Vice President of Talent. Mary will support our continued investment in the next generation of talent here at Abnormal.
Read More
B 06 01 22 Stripe Phishing
In this sophisticated credential phishing attack, the threat actor created a duplicate version of Stripe’s entire website.
Read More
B Podcast Engineering9
In episode 9 of Abnormal Engineering Stories, Dan sits down with Mukund Narasimhan to discuss his perspective on productionizing machine learning.
Read More
B 05 31 22 RSA Conference
Attending RSA Conference 2022? So is Abnormal! We’d love to see you at the event.
Read More
B 05 27 22 Active Ransomware Groups
Here’s an in-depth analysis of the 62 most prominent ransomware groups and their activities since January 2020.
Read More
B 05 24 22 ESI Season 1 Recap Blog
The first season of Enterprise Software Innovators (ESI) has come to a close. While the ESI team is hard at work on season two, here’s a recap of some season one highlights.
Read More
B 05 13 22 Hiring Experience
Abnormal Security is committed to offering an exceptional experience for candidates and employees. Hear about our recruiting and onboarding firsthand from three Abnormal employees.
Read More
B 05 11 22 Scaling Out Redis
As we’ve scaled our customer base, the size of our datasets has also grown. With our rapid expansion, we were on track to hit the data storage limit of our Redis server in two months, so we needed to figure out a way to scale beyond this—and fast!
Read More